A quantum key distribution system immune to detector attacks 



A. Rubenok, 1 ' 2 J. A. Slater, 1 - 2 P. Chan, 1 ' 3 I. Lucio-Martinez, 1 ' 2 and W. Tittel 1 ' 2 

institute for Quantum Information Science, University of Calgary, Canada 
2 Department of Physics & Astronomy, University of Calgary, Canada 
s Department of Electrical & Computer Engineering, University of Calgary, Canada 

Quantum key distribution (QKD) promises the distribution of cryptographic keys whose secrecy 
is guaranteed by fundamental laws of quantum physics [T] [2]. After more than two decades devoted 
to the improvement of theoretical understanding and experimental realization, recent results in 
quantum hacking have reminded us that the information theoretic security of QKD protocols does 
not necessarily imply the same level of security for actual implementations. Of particular concern 
are attacks that exploit vulnerabilities of single photon detectors 3-6 , whose effectiveness may have 
led potential users to conclude that QKD is not viable. Here we report the first proof-of-principle 
demonstration of a new protocol[7] that removes the threat of any such attack. More precisely, 
we demonstrated this approach to QKD in the laboratory over more than 80 km of spooled fiber, 
as well as across different locations within the city of Calgary. The robustness of our fiber-based 
implementation, which establishes the possibility for controlled two-photon interference in a real- 
world environment, along with the enhanced level of security offered by the protocol, confirms QKD 
as a realistic technology for safeguarding secrets in transmission. Furthermore, our technological 
advance removes a remaining obstacle to realizing future applications of quantum communication, 
such as quantum repeaters[8] and, more generally, quantum networks. 



Starting with its invention in 1984[5], theoretical and 
experimental QKD have progressed rapidly. Informa- 
tion theoretic security, which ensures that secret keys 
can be distributed even if the eavesdropper, Eve, is only 
bounded by the laws of quantum physics, has been proven 
under various assumptions about the devices of the legit- 
imate QKD users, Alice and BobJTUlHI]. Furthermore, 
experimental demonstrations employing quantum states 
of light have meanwhile resulted in key distribution over 
more than 100 km distance through optical fiber|12l IT5] 
or air [T3], QKD networks [TJ], as well as in commercially 
available products[16j. 

However, it became rapidly clear that some of the as- 
sumptions made in QKD proofs were difficult to meet 
in real implementations, which opened side-channels for 
eavesdropping attacks. The most prominent examples 
are the use of quantum states encoded into attenu- 
ated laser pulses as opposed to single photons [T7]. or, 
more recently, various possibilities for an eavesdropper 
to remote-control or monitor single photon detectors |3J- 
|B]. Fortunately, it turns out that both side channels 
can be removed. In the first case, randomly choos- 
ing between so-called signal or decoy states (quantum 
states encoded into attenuated laser pulses with differ- 
ent mean photon numbers) allows one to establish a se- 
cret key strictly from detection events that stem from 
single photons emitted by the laser |18ff20] , (We remind 
the reader [T7] that an attenuated laser pulse comprising 
on average fi photons contains exactly one photon with 
probability Pi(fi) — /ie~ p .) Furthermore, beyond the 
level of security offered by previously implemented pro- 
tocols, two recently proposed QKD protocols]?] HI] also 
ensure that controlling or monitoring detectors, regard- 
less by what means, does not help the eavesdropper to 
gain information about the distributed key. These pro- 
tocols are part of the family of device independent (DI) 



protocols [55] that attempt to remove assumptions about 
the internal working of the devices used for QKD. 

The measurement-device independent quantum key 
distribution (MDI-QKD) protocol[7J (which is one of the 
two above-mentioned protocols) is a clever time-reversed 
version of QKD based on the distribution and measure- 
ment of pairs of maximally entangled photons |23j: Al- 
ice and Bob randomly and independently prepare pho- 
tons in one out of the four qubit states \vj) a b € 
[|0>, |1>, |+), |-)], where |±) = 2-V 2 (|0) ± |1». For the 
sake of explanation, assume for the moment that Al- 
ice and Bob both possess a source that produces true 
single photons. The photons are then sent to Charlie, 
who performs a Bell state measurement, i.e. projects 
the photons' joint state onto a maximally entangled 
Bell state [2_3]. Charlie then publicly announces the in- 
stances in which his measurement resulted in a projec- 
tion onto \ip-) = 2- 1 / 2 (|0) A ® |1) B - ® |0) B ) and, 
for these cases, Alice and Bob publicly disclose the bases 
(z, spanned by |0) and |1), or x, spanned by |±)) used to 
prepare their photons. (They keep the choices of state se- 
cret.) Identifying quantum states with classical bits (e.g. 
|0), |— ) = 0, and |1), |+) = 1) and keeping only events 
in which Charlie found \ip~) and they picked the same 
basis, Alice and Bob now establish anti-correlated key 
strings. (Note that a projection of two photons onto 
indicates that the two photons, if prepared in the same 
basis, must have been in orthogonal states.) Bob then 
flips all his bits, thereby converting the anti-correlated 
strings into correlated ones. Next, the so-called x-key is 
formed out of all key bits for which Alice and Bob pre- 
pared their photons in the x-basis; its error rate is used 
to bound the information an eavesdropper may have ac- 
quired during photon transmission. Furthermore, Alice 
and Bob form the z-key out of those bits for which both 
picked the z-basis. Finally, they perform error correction 
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FIG. 1: Schematics for QKD field test. Aerial view showing Alice (located at SAIT Polytechnic), Bob (located at the 
University of Calgary (U of C) Foothills campus) and Charlie (located at the U of C main campus). Also shown is the 
schematic of the experimental setup. Optically synchronized using a master clock (MC) at Charlie's, Alice and Bob (not 
shown; setup identical to Alice's) generate time-bin qubits at 2 MHz rate encoded into attenuated laser pulses using highly 
stable continuous-wave lasers at 1552.910 nm wavelength, temperature-stabilized intensity and phase modulators (IM, PM), 
and variable attenuators (ATT). (The two temporal modes denning each time-bin qubit are of 500 ps (FWHM) duration and 
are separated by 1.4 ns.) The qubits travel through 12.4 and 6.2 km of deployed optical fibers to Charlie, where a 50/50 beam 
splitter followed by two InGaAs single photon detectors (SPD) allows projecting the bi-partite state onto the \ip~) Bell state. 
(This projection occurs if the two detectors indicate detections with 1.4±0.4 ns time difference.) Indistinguishability of the 
photons upon arrival is achieved through the combination of three different feedback systems, as detailed in the Supplementary 
Information. The individual setups for measurements using spooled fiber (arrangement (i)) are identical. 



and privacy amplification [IJ [2] to the z-key, which results 
in the secret key. 

As any other QKD protocol, MDI-QKD ensures that 
Eve cannot gain information by eavesdropping photons 
during transmission without leaving a trace, which, in 
turn, reveals her presence and the amount of eaves- 
dropping. Furthermore, the outstanding attribute of 
the MDI-QKD protocol is that it de-correlates detection 
events (here indicating a successful projection onto the 
Bell state) from the values of the x- and z-key bits 
and hence the secret key bits. In other words, detec- 
tor side channels, regardless whether actively attacked 
or passively monitored, do not help Eve gain information 
about the secret key. 

Unfortunately, the described procedure is currently dif- 
ficult to implement, due to the lack of practical single 
photon sources. However, it is possible to replace the 
true single photons by attenuated laser pulses of varying 
mean photon number (i.e. decoy states, as introduced 
above), and to establish the secret key only from those 
joint measurements at Charlie's that stem from Alice and 
Bob both sending single photons [7]. This procedure re- 
sults in the same security against eavesdropping as the 
conceptually simpler one discussed above. The secret key 
rate, s, distilled from signal states, is then given by 

s = Q z 11 (l-h 2 (ef 1 ))-Qlfh 2 (e^, (1) 



where h,2(X) denotes the binary entropy function eval- 
uated on X, and / describes the efficiency of error cor- 
rection with respect to Shannon's noisy coding theorem. 
Furthermore, Qf 1; ef l5 Q^, and are gains (Q - the 
probability of a projection onto per emitted pair of 
pulses) and error rates (e - the ratio of erroneous to total 
projections onto in either the x- and z-basis for Al- 

ice and Bob sending single photons (denoted by subscript 
"11"), or averaged over all possible photon number states 
(denoted by subscript "/i" ) , respectively. While the latter 
are directly accessible from experimental data, the former 
have to be calculated using a decoy state method [7 . 

To demonstrate the feasibility of MDI-QKD, we per- 
formed experiments in two different arrangements (see 
Fig. [I]): (i) Alice, Bob and Charlie are located within 
the same lab, and Alice and Bob are connected to Char- 
lie via separate spooled fibers of various lengths and loss 
(see table 1). (ii) Alice, Bob and Charlie are located in 
different locations within the city of Calgary, and Alice 
and Bob are connected to Charlie by deployed fibers of 
12.4 and 6.2 km length, respectively. 

A crucial and previously undemonstrated element for 
MDI-QKD in a real-world environment is a Bell state 
measurement with photons that have been generated by 
independent sources and travelled through separate de- 
ployed fibers, i.e. fibers that feature independent changes 
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FIG. 2: Potential limitations to Bell state measure- 
ments, a, Drift of differential arrival time. Variation of 
arrival time difference of attenuated laser pulses emitted at 
Alice's and Bob's after propagation to Charlie, b, Change of 
polarization overlap. Variation in the overlap of the polariza- 
tion states of originally horizontally polarized light (emitted 
by Alice and Bob) after propagation to Charlie. Both panels 
include temperature data (crosses) showing correlation be- 
tween variations of indistinguishability and temperature. 



of propagation times and polarization transformations. 
We emphasize that this building block is not only key to 
implementing the MDI-QKD protocol, but also removes 
a remaining obstacle to realizing future applications of 
quantum communications such as quantum repeaters [5] 
and, more generally, networks. To implement this mea- 
surement, these photons need to be indistinguishable, i.e. 
have to arrive simultaneously within their respective co- 
herence times, with equal polarization states, and require 
sufficient spectral overlap. Yet, significant changes to the 
photons' indistinguishability due to time- varying proper- 
ties of optical fibers can happen in less than a minute, 
as depicted in Fig. [2] for the polarization and tempo- 
ral degrees of freedom. Furthermore, despite local fre- 
quency locks, the difference between the frequencies of 
Alice's and Bob's lasers also varied by up to 20 MHz 
per hour. These instabilities make Bell state measure- 
ments without stabilization by means of active feedback 
impossible. Hence, to enable MDFQKD and pave the 
way to quantum repeaters and quantum networks, we 
tracked and stabilized photon arrival times and polariza- 
tion transformations, as well as the frequency difference 
between Alice's and Bob's lasers during all measurements 
(see the Supplementary Information for more details). 
We verified that we could indeed maintain the photons' 
indistinguishability by frequently measuring the visibil- 
ity, Vhom-i of the so-called Hong-Ou-Mandel dip[2S] (a 
two-photon interference experiment that is closely re- 
lated to a Bell state measurement). On average we found 
Vhom = 47±1%, which is close to the maximum value of 
50% for attenuated laser pulses with a Poissonian photon 
number distribution^ . 

For our proof-of-principle demonstration of the new 
QKD protocol, we prepared, for all configurations listed 
in Table 1, all 4 combinations of Alice and Bob picking 
a state from the z-basis (i.e. \iP)a,b & [|0), |1)], where |0) 
and 1 1) denote time-bin qubits[2"4"] prepared in an early or 
late temporal mode) , and all 4 combinations of picking a 



state from the x-basis (i.e. \iP)a,B <= [|+) , | — )])• F° r eacn 
of these 8 combinations, we generated attenuated laser 
pulses containing on average Ha = Hb =M £ [0.1 ± 5%, 
0.25 ± 5%, 0.5 ± 5%] photons (note that Alice and Bob 
always chose the same mean values). Depending on the 
observed gains, measurements took between 30 seconds 
and 6 minutes. We recorded the number of joint detec- 
tions in which one detector indicated an early arriving 
photon (or an early noise count), and the other detector 
indicated a late arriving photon (or a late noise count), 
which, for time-bin qubits, is regarded as a projection 
onto the |i/'~)-state[53]. This data yields the gains, QZ' Z , 
and error rates, e^ ,z , which are depicted in Fig. [3] and 
listed in the Supplementary Information. 

First, to assess if our implementation performs as ex- 
pected, we modelled the experimentally accessible er- 
ror rates, e^ ,z , and gains, Q°^ ,z , taking into account 
all identified imperfections. (The details of these and 
all other simulations mentioned below are described in 
the Supplementary Information.) The results, together 
with the experimentally obtained data, are plotted in 
Fig. [3] as a function of y?tAtB [27^ (tA and ts arc the 
transmission coefficients characterizing the link between 
Alice and Charlie, and Bob and Charlie, respectively. 
They are related to the respective loss coefficients via 
tA.B = 1 — Ia,b)- The model reproduces the experimen- 
tal data over more than three orders of magnitude within 
the experimental uncertainties, regardless whether it was 
taken in arrangement (i) or (ii). This suggests that we 
understand all imperfections of our implementation, and 
that the use of deployed fibers does not impact on its 
performance. 

Next, we evaluated the secret key rates using Eq. [12] 
In addition to the directly measured (or modelled) quan- 
tities Q z and e z , this requires knowledge of Q\ x and e\ x . 
As the decoy state method proposed to evaluate these 
quantities for MDI-QKD from experimental data[7] is 
still impractical (but we expect that its efficiency will 
improve in the near future), we use the values for Q\ Y 
and e\ x predicted by our model (which we have tested 
above) and calculate, for values of total fiber loss, rang- 
ing from to 35 dB, how much secret key could be ex- 
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9.1 
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13.7 
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13.6 


27.2 


12.4 


4.5 


6.2 


4.5 


9.0 



TABLE I: Length and loss of the individual fiber links (I a, I a, 
(■b, Ib) used to connect Alice and Charlie, and Charlie and 
Bob, respectively, for all tested configurations. The table also 
lists the total loss I = I a + Ib (in dB). For each configuration, 
three different mean number of photons per attenuated laser 
pulse were chosen: /1 £ [0.1,0.25,0.5]. The last line details 
real- world measurements. 
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FIG. 3: Results, a, Experimentally obtained and simulated values for error rates, e^' z , as a function of fj, 2 tAtB where, in 
our implementation, (j£a = [its- b, Experimentally obtained and simulated values for gains, QZ'", as a function of /Aa£b- 
c, Secret key rates as a function of total loss, I = I a + Ib (in dB), with I a — Ib, for different mean photon numbers, [i. The 
secondary x-axis shows distance assuming loss of 0.2 dB/km. In all panes, diamonds depict results obtained using deployed 
fibers (see Fig. [l^); all other data was obtained using fiber on spools. Uncertainties (one standard deviation) were calculated 
for all measured points assuming Poissonian detection statistics. We stress that the modelled values do not stem from fits 
but are based on parameters that have been established through independent measurements. Monte-Carlo simulations using 
uncertainties in these measurements lead to predicted bands as opposed to lines (for more details see the Supplementary 
Information) . 



tracted under optimum conditions. (This includes the 
assumptions that no photon-number splitting attack [TT] 
has taken place, an error correction efficiency /=1, and 
long key strings [28 .) The results are depicted in Fig. [3] 
We emphasize that our approach to assessing efi and 
Qfi is not suitable for the actual distribution of secret 
keys, however, it yields an interesting upper bound [29], 
Under the stated assumptions, we find that our setup al- 
lows secret key distribution up to a total loss of 27.1±3.6 
dB, which is only marginally smaller than the most lossy 
link investigated here. Assuming the standard loss co- 
efficient for telecommunication fibers without splices of 
0.2 dB/km, this value corresponds to a maximum dis- 
tance between Alice and Bob of 135±18 km. Assuming 
a more realistic error correction efficiency of /=1.17 [T5] . 
these values change to 24.0±3.7 dB loss and 120 ±18 km 
distance, respectively. 

Our setup contains only standard, off-the-shelf com- 
ponents. The extension to higher key rates using state- 
of-the-art detectors[30 is straightforward, and its de- 
velopment into a complete QKD system follows stan- 
dard procedures [H]. We note that, while our system 
is immune to detector attacks, it currently does not 
protect against so-called Trojan Horse attacks [J [5] (in 
which Eve probes Alice's or Bob's system by inject- 
ing light and analyzing the back reflection) nor attacks 
that exploit phase coherence between subsequently pre- 
pared qubits[31 . However, counter measures against 



these attacks, which entail optical isolators or monitor- 
ing detectors, and additional phase modulators, respec- 
tively, are well understood and have been implemented 
previously pQ [21] ■ We also point out that implementa- 
tions of MDI-QKD such as ours are particularly well 
suited for key distribution over long-distances, and we ex- 
pect that further developments will rapidly push the sep- 
aration between Alice and Bob beyond its current max- 
imum of 250 km|13j. Finally, we remind the reader that 
the technological advance that enabled Bell state mea- 
surements in a real- world environment and with truly in- 
dependent photons also removes a remaining obstacle for 
building a quantum repeater, which promises quantum 
communication such as QKD over arbitrary distances. 
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Supplementary Information 
I. DETAILS ON POLARIZATION, TEMPORAL & FREQUENCY STABILIZATION 

In order to ensure the indistinguishability of photons arriving at Charlie's and to allow, for the first time, Bell state 
measurements in a real- world environment, we developed and implemented three stabilization systems (see Fig. [I]): 
fully-automatic polarization stabilization, manual adjustment of photon arrival time, and manual adjustment of laser 
frequency. Note that automating the frequency and timing stabilization systems is straightforward, particularly if the 
active control elements are placed in Charlie's setup. 

The polarization stabilization system[29| |32] employed an additional laser (at Charlie's) and two polarization con- 
trollers (one at Alice's and one at Bob's). Every 10 s, Charlie disabled data collection for 0.5 s and sent high intensity, 
vertically polarized stabilization light to Alice and Bob. This light is detected by photodiodes at Alice's and Bob's, 
and used to trigger their commercially available polarization controllers (POCs), which were programmed to adjust 
the polarization of the stabilization light to vertical. This implies that Alice's and Bob's attenuated laser pulses, 
which are emitted horizontally polarized, both arrive horizontally polarized at Charlie's. 

To stabilize the frequency difference between Alice's and Bob's lasers, Alice used a frequency shifter (FS) that 
employed a linear phase chirp via a serrodyne modulation signal applied to a phase modulator. Whenever the error 
rate in the x-key increased significantly, Charlie communicated the frequency difference after measuring the beat 
frequency by mixing their unmodulated and unattenuated laser outputs on the beam splitter. Adjustments, in the 
worst case, were required every 30 minutes to maintain a difference below 10 MHz. 

To enable synchronization, Charlie sent a master clock signal via a second set of fibers to Alice and Bob. Roughly 
every minute, Charlie measured the qubit arrival-time difference using his SPDs and high-resolution electronics and 
sent this information to Alice and Bob. They then adjusted their qubit generation time using function generators to 
apply a phase shift to the recovered master clock. 

II. DISCUSSION OF ERROR RATES e* z 

Let us briefly discuss the ideal case in which the quantum states encoded into attenuated laser pulses as well as the 
projection measurement are perfect. To gain some intuitive insight into how the difference in the error rates, e^ z , 
arises, we consider only the most likely case that can cause the detection pattern associated with a projection onto 
\ip~) . two photons arrive at the beam splitter. Note that these photons can either come from the same person, or 
from different persons. 

• z-basis: Assuming that Alice and Bob both prepare states in the z-basis, only photons prepared in orthogonal 
states can cause a projection onto This implies that one photon has to come from Alice, and the other 
one from Bob (if generated by the same person, both photons would be in the same state). Hence, taking into 
account Bob's bit flip, Alice and Bob always establish identical bits, i.e. (ideal) = 0. 

• x-basis: Assuming that both Alice and Bob prepare states in the x-basis, it is no longer true that only photons 
prepared in orthogonal states and by different persons can cause a projection onto l^ - )- Indeed, if the two 
photons have been prepared by the same person, it is possible to observe the detection pattern associated with a 
projection onto In this case, given that all detected photons have been prepared by the same person, the 
detection does not indicate any correlation between the states prepared by Alice and Bob. In turn, this leads 
to uncorrelated key bits. A detailed analysis yields e^(ideal)=l/4 for attenuated laser pulses with Poissonian 
photon number distribution. 

III. THE MODEL 

In the following we will describe the model we use to predict error rates, e^ ,z , and gains, Q^' z , in the non-ideal case. 
The consistency between observed values (see Supplementary Table [Tl]) and predicted data allows us to derive values 
for ef-L and Q\ Y under the assumption of no photon-number splitting attack [17j . In turn, this allows bounding the 
secret key rate. Our model takes into account that qubit states are encoded into attenuated laser pulses (described 



This happens if the two photons are detected in different detectors and in opposite time-bins (early and late). 



6 



TABLE II: Measured error rates, e^' z , and gains, Q^' z , for different mean photon numbers, p, lengths of fiber, £a and £b, 
connecting Alice and Charlie and Charlie and Bob, respectively, and total transmission loss, I. The last set of data details 
real-world measurements. Uncertainties are calculated using Poissonian detection statistics. 





I a [km] 


Ib [km] 


total loss I [dB] 


Ql 


Qt 


e x 




0.49(2) 
0.25(4) 
0.10(1) 


30.98 


11.75 


13.6 


1.04(5) x 10~ 4 
3.2(0) x 10 _s 
4.8(4) x 10" 6 


5.5(7) x 10 _& 
1.4(7) x 10~ 5 
2.7(2) x 10" 6 


0.27(2) 
0.27(7) 
0.27(8) 


0.03(7) 
0.04(0) 
0.07(3) 


0.49(2) 
0.25(2) 
0.09(9) 


40.80 


40.77 


18.2 


3.9(2) x 10 -5 
9.8(7) x 10~ 6 
1.5(7) x 10" 6 


2.02(4) x 10" 5 
5.(1) x 10~ 6 
9.(2) x 10~ 7 


0.26(1) 
0.27(0) 
0.28(1) 


0.045(8) 
0.04(7) 
0.08(4) 


0.50(2) 
0.24(4) 
0.10(0) 


51.43 


32.19 


22.7 


1.3(7) x \^ 
3.7(3) x 10~ 6 
6.(0) x 10~ 7 


1.0(7) x lO -5 
3.0(1) x 10~ 6 
4.0(7) x 10~ 7 


0.27(5) 
0.26(9) 
0.3(0) 


0.05(4) 
0.07(1) 
0.10(3) 


0.50(2) 
0.25(4) 
0.10(3) 


61.15 


42.80 


27.2 


4.9(6) x 10~ e 
1.5(0) x 10~ 6 
2.4(5) x 10" 7 


2.9(4) x 10~ 6 
7.(1) x 10~ 7 
1.3(1) x 10 -7 


0.28(0) 
0.28(2) 
0.2(8) 


0.06(8) 
0.09(1) 
0.1(4) 


0.49(5) 
0.26(1) 
0.10(0) 


12.4 


6.2 


9.0 


3.0(1) x 10~ 4 
8.7(8) x 10" s 
1.4(5) x 10 -5 


1.66(7) x 10" 4 
5.0(1) x 10~ 5 
7.(3) x 10~ 7 


0.27(3) 
0.26(3) 
0.27(6) 


0.036(2) 
0.04(3) 
0.05(5) 



by a sum over photon number states with Poissonian number distribution), imperfections in the preparation of the 
quantum state of each photon, transmission loss, as well as errors in the projection measurement stemming from 
non-maximum quantum interference on Charlie's beam splitter and detector noise. 

A. Derivation of the model 

In the MDI-QKD protocol, Alice and Bob derive key bits whenever Charlie's measurement indicates a projection 
onto the \ip~) Bell state. This occurs when one of the single photon detectors (SPD) behind Charlie's 50/50 beam 
splitter signals a detection in an early time-bin (a narrow time interval of 400 ps duration centered on the arrival 
time of photons occupying an early temporal mode) and the other detector signals a detection in a late time-bin 
(a 400 ps time-interval centered on the arrival time of photons occupying a late temporal mode). We model the 
probability that this detection pattern occurs for various quantum states of photons emitted by Alice and Bob 2 as a 
function of mean photon number per pulse (^a and (ib, respectively) and transmission coefficients of the fiber links 
(t,A and ts, respectively). Note that our experiment as well as the model described below consider only the cases in 
which ha = Hb = M an d tA = t-B = t. (Adapting the model to non-equal average photon numbers and transmission 
coefficients is straightforward.) We also assume for the model that the two SPDs have identical characteristics, which 
we confirmed in initial tests. We consider time-bin qubit states of the form 

\tp) = Vm x ' z + b x - z \0) + e'^'Vl - m x ' z + b x - z \l) (2) 

where |0) and |1) denote photons in early and late temporal modes, respectively. The choice of this general state is 
motivated by the experimental imperfections that we could identify - note that describes a pure state. Ideally, 
m z G [0, 1] for photon preparation in the z- basis (in this case, the value of cf) z is irrelevant), m x — ^ and cf) x € [0,7t] 
for the x-basis, and b x ' z — for both bases. Imperfect preparation of photon states is modelled by using non-ideal 
ui x,z , (f> x ' z and b x ' z for Alice and Bob 3 . All parameters needed to describe \ip) have been determined by measurements 
detailed below. 

We build up the model by first considering the probabilities that particular outputs from the beam splitter will 
generate the detection pattern associated with a projection onto \ip~). The outputs are characterized by the number 



2 Note that all photons within each attenuated laser pulse are in the same quantum state. 

3 The parameter b x ' z is included to represent the background laser light transmitted through the intensity modulators at Alice's or Bob's 
during the time-bins denned above. Note how the added background leads to non-normalized states. 
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of photons per output port as well as their quantum state. The probabilities for each of the possible outputs to occur 
can then be calculated based on the inputs to the beam splitter (characterized by the number of photons per input 
port and their quantum states, as defined in Eq. [2]). (The beam splitter is assumed to be lossless.) Note that for the 
simple cases of inputs containing zero or one photon, we calculate the probabilities leading to the desired detection 
pattern directly, i.e. without going through the intermediate step of calculating outputs from the beam splitter. 
Finally, the probabilities for each input to occur are calculated based on the probability for Alice and Bob to send 
attenuated laser pulses containing exactly i photons, all in a state given by Eq. [2] The probabilities for a particular 
input to occur also depend on the transmissions of the quantum channels, t. Note that we do not consider terms 
describing three or more photons incident on the beam splitter as, in our case of heavily attenuated laser pulses, they 
do not contribute significantly to projections onto \tp~)- 



Let us begin by considering the simplest case in which no photons are input into the beam splitter. In this case, 
detection events can only be caused by detector noise. We denote the probability that a detector indicates a spurious 
detection as P n . Detector noise stems from two effects: dark counts and afterpulsing [33] . Dark counts represent 
the base level of noise in the absence of any light, and we denote the probability that a detector generates a dark 
count per time-bin of 400 ps duration as Pd- Afterpulsing is additional noise produced by the detector as a result 
of prior detection events. The probability of afterpulsing is dependent on the total count rate, hence we denote the 
afterpulsing probability per time-bin as P a (/j,i) since [i and t determine the count rate (see below for afterpulse 
characterization). The total probability of a noise count in a particular time-bin is thus P n = Pd 4- P a (/i,i). All 
together, we find the probability (conditioned on having no photons input into the beam splitter) for generating the 
detection pattern associated with a projection onto the IVO-state of 4 : 

P(|t/T)|0 photons, in) = P(|^")|0 photons, out) = 2P 2 . (3) 

Note that the probability conditioned on having no photons at the inputs of the beam splitter equals the conditioned 
on having no photons at the outputs. 

Next, we consider the case in which a single photon arrives at the beam splitter. To generate the detection pattern 
associated with \ip~), either the photon must be detected and a noise event must occur in the other detector in the 
opposite time-bin, or, if the photon is not detected, two noise counts must occur as in Eq. [3j We find 

P(|V>")|1 photon, in) = r)P n + (1 - r))P(\ip~)\0 photons, out), (4) 

where ry denotes the probability to detect a photon that occupies an early (late) temporal mode during an early (late) 
time-bin (we assume r\ to be the same for both detectors). Note that the duration of a temporal mode exceeds the 
width of a time-bin, i.e. it is possible to detect photons outside a time-bin (see Supplementary Fig. [4] for a schematical 
representation). While only detections inside one of the two time-bins are used to collect data for our demonstration 
of the protocol, it will become useful later to also define the probability for detecting a photon arriving at any time 
during a detector gate; we will refer to this quantity as 7? ga tc- 

We now consider detection events stemming from two photons entering the beam splitter. The possible outputs 
can be broken down into three cases. In the first case, both photons exit the beam splitter in the same output port 
and are directed to the same detector. This yields only a single detection event even if the photons are in different 
temporal modes. The probability for Charlie to declare a projection onto is then 

P(|VOI 2 photons, 1 spatial mode, out) = (1 - (1 - ?7) 2 )P n + (1 - rf) 2 P{\ijr)\Q photons, out). (5) 

In the second case, the photons are directed towards different detectors and occupy the same temporal mode. 
Hence, to find detections in opposite time-bins in the two detectors, at least one photon must not be detected. This 
leads to 

P(\ip~)\2 photons, 2 spatial modes, 1 temporal mode, out) = 277(1 — ?7)P n + (1 — rj) 2 P(\ip~)\0 photons, out). (6) 



4 Here and henceforward, we have ignored the multiplication factor (1-P n ) ~ 1. 




time 



FIG. 4: Sketch (not to scale) of the probability density p(t) for a detection event occuring as a function of time within one 
gate. Detection events can arise from a photon within an optical pulse (depicted here as a pulse in the late temporal mode), or 
be due to optical background, a dark count, or afterpulsing. Also shown are the 400 ps wide time-bins used for the collection 
of experimental data. Within the early time-bin only optical background, dark counts and afterpulsing give rise to detection 
events. Note that the width of the temporal mode exceeds the bounds of the time-bin. 



In the final case, both photons occupy different spatial as well as temporal modes. In contrast to the previous case, 
a projection onto \ip~) can now also originate from the detection of both photons. This leads to 



P(\ip )|2 photons, 2 spatial modes, 2 temporal modes, out) = 

?? 2 + 27/(1 - ?y)P n + (1 - r7) 2 P(|VO|0 photons, out). (7) 

In order to find the probability for each of the three two-photon outputs to occur, we examine two-photon inputs 
to the beam splitter. For ease of analysis, we first introduce some notation: 



^(0,0) = ( m r+br)(mr+br) 

p x ' z (0,l) = (m x ' z + b x ' z )(l-m x 2 ' z + b x ' z ) 
p*'*(l,0) = (l-m x ' z + b x ' z )(m x 2 ' z + b x 2 z ) 
p x ' z (l,l) = (l-m x - z +b x { z ){l-m x 2 z +b x 2 ' z ) 

b*£ m i+2br+2br +^ z b x 2 z (8) 



where b x ' 2 and m x ' 2 are the parameters introduced in Eq. [2J the subscripts label the photon (one or two) whose state 
is specified by the parameters. Furthermore, p x ' z (i,j) is proportional to finding photon one in temporal mode i and 
photon two in temporal mode j 5 , where i,j £ [0, 1]. Finally, 6„orm is a normalization factor. 

We note that it is possible for the two photons to be subject to a two-photon interference effect (known as photon 
bunching) when impinging on the beam splitter. Let us first consider the case in which the two photons do not 
interfere. This case occurs if both photons either come from the same source, or if they come from different sources 
and are perfectly distinguishable (for example, if they had orthogonal polarizations). With probability 1/2 the two 
photons exit the beam splitter in the same output port (or spatial mode). Furthermore, with probability [p x ' z (0, 0) + 
p x - z (l, l)]/2b x £ m we find the photons in different spatial modes and in the same temporal mode, and with probability 
[p x ' z (0, 1) + p x - z (l 7 0)]/2b x ' z lm we find the photons in different spatial and temporal modes. Thus the probability that 
Charlie finds the desired detection pattern is: 



5 This assumes that both photons are measured in the z-basis. 
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P{\ip )|2 photons, non-interfering, in) = 

-P{\ij}~)\2 photons, 1 spatial mode, out) 



2 

p x ' z (0,0) + p x ' z (l,l) 

£U norm 

p^(0, 1) + p x - z (l,0) 



2b 



norm 



P(\if> )|2 photons, 2 spatial modes, 1 temporal mode, out) 

P(\tp~)\2 photons, 2 spatial modes, 2 temporal modes, out). (9) 



Finally, consider the case in which the two input photons interfere on the beam splitter, which occurs if they 
come from different sources and are indistinguishable. In this case, the probabilities of finding the outputs from the 
beam splitter discussed in Eqs. [5][7] are dependent on the phase difference between the states of the two photons, 
Acj) x ' z = 4> x ' z — 4>2 ,z ■ Note that, due to the two-photon interference effect, finding the two photons in different spatial 
modes and the same temporal mode is impossible. We are thus left with the case of having two photons in the same 
output port (the same spatial mode), which occurs with probability \p x ' z (0, 0)+p x ' z (l, 1) +0.5(p xz (0, l)+p x ' z (l,0)) + 
y / p x > z (0, l)p x ' z (l, 0) cos(Acj) x ' z )]/b x ' z Tm , and the case of having the photons in different temporal and spatial modes, 
which occurs with probability [0.5(^^(0,1) +p x > z (l,0)) - y/p x ' z (0, 1)^^(1, 0) cos(A(j> x - z )]/bl- z m . This leads to 

P(\ip~)\2 photons, interfering, in) = 

p x ' z (0, 0) + p x > z {l, 1) + 0.5(^(0, 1) +p x ' z (l, 0)) + ^p x ' z (0, l)p x ' z (l, 0) cos(A<^ z ) 

fnorm 

xP(\tp~)\2 photons, 1 spatial mode, out) 
0.5{p^(0,l)+^(l,0)) - vV^CO, 1)^(1, 0) cos(A^' 2 ) 

^norm 

xP(\tp~)\2 photons, 2 spatial modes, 2 temporal modes, out). (10) 



Now that we have calculated the probabilities of a detection pattern indicating IV* - ) f° r various inputs to the beam 
splitter, let us consider with what probability each case occurs. We limit our discussion to the cases with two or less 
photons at the input of the beam splitter. We denote the probability that i photons arrive from one source by Pi. 
The cases we consider and their probabilities of occurrence, Po, are thus given by: 

• photons at the input from both sources: Po = PqPq 

• 1 photon at the input from Alice and from Bob: Po = PiPo 

• photons at the input from Alice and 1 from Bob: Po = PoPi 

• 2 photons at the input from Alice and from Bob: Po = P2P0 

• photons at the input from Alice and 2 from Bob: Po = P0P2 

• 1 photon at the input from both sources: Po = Pi Pi 

The distribution of the number of photons per attenuated laser pulse with mean \it (at the input of the beam splitter) 
is Poissonian, hence 

l ~ i\ ■ 

For each of these cases, we have already computed the probability that Charlie obtains the detection pattern associated 
with the |-0~)-state for arbitrary input states of the photons (as defined in Eq. 1). When zero or one photons arrive 
at the beam splitter, Eq. [3] and Eq. [4] are used, respectively. In the case in which two photons arrive from the same 
source, Eq. [9] is used. Finally, in the case in which one photon arrives from each source, Eq. |10| would be used in the 
ideal case. However, perfect indistinguishability of the photons cannot be guaranteed in practice. We characterize 
the degree of indistinguishability by the visibility, V, that we would observe in a closely-related Hong-Ou-Mandel 
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(HOM) interference experiment [55] with single-photon inputs. This visibility is a factor of two higher than the one 
we measured with attenuated laser pulses as inputs (see main text), resulting in V = (94 ±2)%. Hence, taking into 
account partial distinguishability, the probability of finding a detection pattern corresponding to the projection onto 
is given by 

P(\tjj~)\2 photons, visibility V, in) = 

VP(\ip~)\2 photons, interfering, in) + (1 — V)P(\i/)~)\2 photons, non-interfering, in). (11) 

Equations [3fTT] detail all possible causes for observing the detection pattern associated with a projection onto the 
Bell state, if up to two photons at the beam splitter input are taken into account. To calculate the gains, Q^' 2 , 
using these equations, we need only substitute in the correct values of fi, t, m x ' z , b x,z , and Acj> x ' z for the cases in 
which Alice and Bob both sent attenuated laser pulses in the x-basis or z-basis, respectively. The error rates, e^' z , can 
then be computed by separating the projections onto \tp~) into those where Alice and Bob sent photons in different 
states (yielding correct key bits) and in the same state (yielding erroneous key bits). More precisely, the error rates, 
e^*, are calculated as e x ' z = 'fwrangj 'iPcorrect + Pwrong) where Pwrong (Pcorrect) denotes the probability for detections 
yielding an erroneous (correct) bit in the x (or z)-key. 

B. Deriving secret key rates 

In order to find the secret key rate, 

s = Q z 11 {l-h 2 (e* u ))-Qlfh 2 (e* fi ), (12) 

it is also necessary to compute the gain, and the error rate, ef lt that stem from events where both sources 

emit a single photon. The photon number distribution at the sources is Poissonian, with mean number /i. Using 
the transmission of the links, t, the probabilities for the four combinations of photon number states at the input of 
the beam splitter, conditioned on both parties having emitted a single photon, can be computed. Specifically, with 
probability i 2 , both photons arrive at the beam splitter. When one photon is lost, with probability t(l—t) it is Alice's 
photon that arrives, and with probability (1 — t)t it is Bob's. Finally, with probability (1 — t) 2 , neither photon arrives 
at the beam splitter. Thus, we find 

P(\ip~)\l photon per source, visibility V) = 
Vt 2 P(\tp~}\2 photons, interfering, in) 
+(1 - V)t 2 P{\i;-)\2 photons, non-interfering, in) 
+t(l - t)P(\ip~)\l photon, in) 
+(1 - t)tP(\ip~)\l photon, in) 

+(1 - t) 2 P(|V^)|0 photons, in). (13) 

To calculate e\ x and Qf x , we proceed as discussed above in the case of e x ' z and Q x ' z '. This allows calculating an 
upper bound for the secret key rate using Eq. [12] for a given experimental configuration and value of /, provided one 
assumes no photon- number splitting attack [17] . This upper bound can be reached if the decoy state method, which 
would be used in an actual key distribution, performs optimally. 

To extract secret key rates from the measured values of e z and we first calculate Q\ x and e x x from the modelled 
values of and e*. As the experimentally obtained values for and generally slightly differ from the predicted 
ones, we scale the calculated Q\ x and ef x with respect to this difference before computing the secret key rates (see 
Fig. 3c in the main text). We note that the direct calculation of Qfi and e\ x from observed values of and that 
deviate from the modelled values is not possible. 

IV. CHARACTERIZATION OF EXPERIMENTAL IMPERFECTIONS 

The parameters used in the model described above are derived from data established through independent mea- 
surements. To model the experimental results to the required level of precision, the characterization of experimental 
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TABLE III: Experimentally established values for all parameters required to describe the generated quantum states, as defined 
in Eq. |2j as well as two-photon interference parameters and detector properties. 



Alice 


b z=u = b z=i 

b x =~ = b x=+ 
m z=0 
m z=1 
m x=+ = m x= ~ 

j.2—0 i z— 1 ±x— 4- r ii 

<p — <p = <p T [radj 
<j> x= ~ [rad] 


(7.12 ±0.98) x 10" a 
(5.45 ±0.37) x 10" 3 
0.9944 ±0.0018 


0.4972 ±0.011 


TT + (4.28 ± 0.87) 


Bob 


& 2=u = b z=L = b x =- = b x=+ 

m x=+ = m x= ~ 
(j> z =° = Z=1 = (f> x =+ [rad] 
<^ = - [rad] 


(1.14 ±0.49) x 10" 3 
0.9967 ±0.0008 


0.5018 ± 0.0080 


tt - (4.28 ± 0.87) 




|^>freq| [rad] 
V 
Pi 


< 0.088 
0.94 ±0.02 
(1.83 ±0.77) x 10~ 5 
0.2 
0.145 



imperfections is highly technical at times. It can be broken down into time- resolved energy measurements at the 
single photon level (required to extract /z, b x ' z and m x,z for Alice and Bob, as well as dark count and afterpulsing 
probabilities), measurements of phase (required to establish <f> x,z for Alice and Bob), and visibility measurements. We 
first briefly describe the characterization procedures for the energy measurements, and then the phase measurements. 
The visibility measurement has already been outlined in the main text. The measured values of all parameters relevant 
for our simulations, along with their uncertainties, are summarized in Supplementary Table III A detailed description 
of the characterization of noise due to afterpulsing is left until the end of this section as this is the only parameter 
that depends on the values of ji and t. 



A. Time-resolved energy measurements 



First, we characterize the dark count probability per time-bin, P^, of the SPDs (InGaAs-avalanche photodiodes 
operated in Geiger mode [33]) by observing their count rates when the optical inputs are disconnected. We then send 
attenuated laser pulses so that they arrive just after the end of the 10 ns long gate that temporarily enables single 
photon detection. The observed change in the count rate is due to background light transmitted by the intensity 
modulators (whose extinction ratios are limited) and allows us to establish b x ' z (per time-bin) for Alice and Bob. 
Next, we characterize the afterpulsing probability per time-bin, P a (p, t), by placing the pulses within the gate, and 
observing the change in count rate in the region of the gate prior to the arrival of the pulse. (The afterpulsing model 
we use to assess P a (n,t) from these measurements is described below). 

Once the background light and the sources of detector noise are characterized, the values of m x - z can be calculated 
by generating all required states and observing the count rates in the two time-bins corresponding to detecting photons 
generated in early and late temporal modes. Note that m z=1 for photons generated in state |1) (the late temporal 
mode) is defined to be zero (i.e. the entire optical pulse is located in the second temporal mode), since all counts in the 
early time-bin are attributed to one of the three sources of background described above. Furthermore, we observed 
that m z=0 for photons generated in the |0) state (the early temporal mode) is smaller than one due to electrical 
ringing in the signals driving the intensity modulators. The count rate per gate, after having subtracted the rates due 
to background and detector noise, together with the detection efficiency, 77 ga tc (^gatei as well as ?y, were characterized 
previously based on the usual procedure [3"3]), allows calculating the mean number of photons per pulse, fi. We recall 
that the efficiency coefficient relevant for our model, 77, is smaller than 77 ga te, due to the fact that the duration of each 
attenuated laser pulse exceeds the widths of each time-bin (see Supplementary Fig. [4]) . Finally, we point out that the 
entire characterization described above was repeated for all experimental configurations investigated (i.e. all values 
of fit). We found all parameters to be constant in /it, with the obvious exception of the afterpulsing probability. 
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FIG. 5: Afterpulse probability per time-bin as a function of the average number of photons arriving at the detector per gate. 



To detail the assessment of the phase values <p x ' z determining the superposition of photons in early and late temporal 
modes, let us assume for the moment that the lasers at Alice's and Bob's emit light at the same frequency. First, we 
defined the phase of Bob's |+) state to be zero (this can always be done by appropriately defining the time difference 
between the two temporal modes |0) and |1)). Next, to measure the phase describing any other state (generated by 
either Alice or Bob) with respect to Bob's |+) state, we sequentially send unattenuated laser pulses encoding the 
two states through a common reference interferometer. Comparing the output intensities, we can calculate the phase 
difference. We note that any frequency difference between Alice's and Bob's lasers results in an additional phase 
difference. Its upper bound for our maximum frequency difference of 10 MHz is denoted by </)f req . 



We now turn to the characterization of afterpulsing. After a detector click (or detection event, which includes 
photon detection, dark counts and afterpulsing), the probability of an afterpulse occuring due to that detection 
event decays exponentially with time. The SPDs are gated, with the afterpulse probability per gate being a discrete 
sampling of the exponential decay. This can be expressed using a geometric distribution: supposing a detection event 
occurred at gate k = — 1, the probability of an afterpulse occuring in gate k is given by ap(l — p) k . Thus, if there 
are no other sources of detection events, the probability of an afterpulse occuring due to a detection event is given by 



In a realistic situation, the geometric distribution for the afterpulses will be cut off by other detection events, either 
stemming from photons, or dark counts. In addition, the SPDs have a deadtime after each detection event during 
which the detector is not gated until k > k dcad (note that time and the number of gates applied to the detector 
are proportional). The deadtime can simply be accounted for by starting the above summation at k = fcdead rather 
than k — 0. However, for an afterpulse to occur during the fc th gate following a particular detection event, no other 
detection events must have occured in prior gates. This leads to the following equation for the probability of an 
afterpulse per detection event: 



B. 



Phase measurements 



C. Measurements of afterpulsing 



P(afterpulse per detection) = 



£ (1 - (ji + &)% ate ) 



fc-fcdcadf'l P, \ 

K 1 ~ ^d.gate,/ 



k— fcdead 



( 
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where Pd,gato denotes the detector dark count probability per gate (as opposed to per time-bin), and b characterizes 
the amount of background light per gate. The terms in the sum describe the probabilities of neither having an optical 
detection (either caused by a modulated pulse or background light) nor a detector dark count in any gate before 
and including gate k, and not having an afterpulse in any gate before gate k, followed by an afterpulse in gate k. 
Equation 14 takes into account that afterpulsing within each time-bin is influenced by all detections within each 
detector gate, and not only those happening within the time-bins that we post-select when acquiring experimental 
data. 

The afterpulse probability, P a ,gato, for a given [i and t can then be found by multiplying Eq. 14 by the total count 
rate. 



-Pa.gatc = (G" + & ) i? 7gatc + Pd.gate + fa.gate) P(afterpulse per detection) (15) 
This equation expresses that afterpulsing can arise from prior afterpulsing, which explains the appearance of P a ,gate 



on both sides of the equation. Equation 15 simplifies to 



p _ ((/■» + fr)^7 g atc + ■Pd.gate) P(afterpulse per detection) 
a,satc 1 — P(afterpulse per detection) 

Finally, to extract the afterpulsing probability per time-bin, P a (//, i), we note that we found that the distribution of 
afterpulsing across the gate to be the same as the distribution of dark counts across the gate. Hence, 

PaGM) = Pa.gateT^- (17) 
d,gate 

Fitting our afterpulse model to the measured afterpulse probabilities, we find a = 8.63 x 10~ 3 , p — 3.00 x 10 - ^ and 

as a 



4.96 x 10~ 2 for fcdead = 20. The fit, along with the measured values is shown in Supplementary Fig. 5 



-Pd,gate 

function of the average number of photons arriving at the detector per gate (/i + b)t. 
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